level=info msg=" --agent-not-ready-taint-key='node.cilium.io/agent-not-ready'" subsys=cilium-operator-generic level=info msg=" --arping-refresh-period='30s'" subsys=cilium-operator-generic level=info msg=" --auto-create-cilium-pod-ip-pools=''" subsys=cilium-operator-generic level=info msg=" --auto-direct-node-routes='false'" subsys=cilium-operator-generic level=info msg=" --bgp-announce-lb-ip='false'" subsys=cilium-operator-generic level=info msg=" --bgp-config-path='/var/lib/cilium/bgp/config.yaml'" subsys=cilium-operator-generic level=info msg=" --bpf-lb-external-clusterip='false'" subsys=cilium-operator-generic level=info msg=" --bpf-lb-map-max='65536'" subsys=cilium-operator-generic level=info msg=" --bpf-lb-sock='false'" subsys=cilium-operator-generic level=info msg=" --bpf-map-dynamic-size-ratio='0.0025'" subsys=cilium-operator-generic level=info msg=" --bpf-policy-map-max='16384'" subsys=cilium-operator-generic level=info msg=" --bpf-root='/sys/fs/bpf'" subsys=cilium-operator-generic level=info msg=" --ces-max-ciliumendpoints-per-ces='100'" subsys=cilium-operator-generic level=info msg=" --ces-slice-mode='cesSliceModeIdentity'" subsys=cilium-operator-generic level=info msg=" --ces-write-qps-burst='20'" subsys=cilium-operator-generic level=info msg=" --ces-write-qps-limit='10'" subsys=cilium-operator-generic level=info msg=" --cgroup-root='/run/cilium/cgroupv2'" subsys=cilium-operator-generic level=info msg=" --cilium-endpoint-gc-interval='5m0s'" subsys=cilium-operator-generic level=info msg=" --cilium-pod-labels='k8s-app=cilium'" subsys=cilium-operator-generic level=info msg=" --cilium-pod-namespace=''" subsys=cilium-operator-generic level=info msg=" --cluster-id='0'" subsys=cilium-operator-generic level=info msg=" --cluster-name='default'" subsys=cilium-operator-generic level=info msg=" --cluster-pool-ipv4-cidr='10.0.0.0/8'" subsys=cilium-operator-generic level=info msg=" --cluster-pool-ipv4-mask-size='24'" subsys=cilium-operator-generic level=info msg=" --cluster-pool-ipv6-cidr=''" subsys=cilium-operator-generic level=info msg=" --cluster-pool-ipv6-mask-size='112'" subsys=cilium-operator-generic level=info msg=" --cmdref=''" subsys=cilium-operator-generic level=info msg=" --cni-exclusive='true'" subsys=cilium-operator-generic level=info msg=" --cni-log-file='/var/run/cilium/cilium-cni.log'" subsys=cilium-operator-generic level=info msg=" --cnp-node-status-gc-interval='0s'" subsys=cilium-operator-generic level=info msg=" --cnp-status-cleanup-burst='20'" subsys=cilium-operator-generic level=info msg=" --cnp-status-cleanup-qps='10'" subsys=cilium-operator-generic level=info msg=" --cnp-status-update-interval='1s'" subsys=cilium-operator-generic level=info msg=" --config=''" subsys=cilium-operator-generic level=info msg=" --config-dir='/tmp/cilium/config-map'" subsys=cilium-operator-generic level=info msg=" --custom-cni-conf='false'" subsys=cilium-operator-generic level=info msg=" --debug='false'" subsys=cilium-operator-generic level=info msg=" --debug-verbose=''" subsys=cilium-operator-generic level=info msg=" --disable-cnp-status-updates='true'" subsys=cilium-operator-generic level=info msg=" --disable-endpoint-crd='false'" subsys=cilium-operator-generic level=info msg=" --dnsproxy-enable-transparent-mode='true'" subsys=cilium-operator-generic level=info msg=" --egress-gateway-reconciliation-trigger-interval='1s'" subsys=cilium-operator-generic level=info msg=" --enable-auto-protect-node-port-range='true'" subsys=cilium-operator-generic level=info msg=" --enable-bgp-control-plane='false'" subsys=cilium-operator-generic level=info msg=" --enable-bpf-clock-probe='false'" subsys=cilium-operator-generic level=info msg=" --enable-cilium-endpoint-slice='false'" subsys=cilium-operator-generic level=info msg=" --enable-cilium-operator-server-access='*'" subsys=cilium-operator-generic level=info msg=" --enable-endpoint-health-checking='true'" subsys=cilium-operator-generic level=info msg=" --enable-health-check-nodeport='true'" subsys=cilium-operator-generic level=info msg=" --enable-health-checking='true'" subsys=cilium-operator-generic level=info msg=" --enable-ipv4='true'" subsys=cilium-operator-generic level=info msg=" --enable-ipv4-big-tcp='false'" subsys=cilium-operator-generic level=info msg=" --enable-ipv4-egress-gateway='false'" subsys=cilium-operator-generic level=info msg=" --enable-ipv4-masquerade='true'" subsys=cilium-operator-generic level=info msg=" --enable-ipv6='false'" subsys=cilium-operator-generic level=info msg=" --enable-ipv6-big-tcp='false'" subsys=cilium-operator-generic level=info msg=" --enable-ipv6-masquerade='true'" subsys=cilium-operator-generic level=info msg=" --enable-k8s='true'" subsys=cilium-operator-generic level=info msg=" --enable-k8s-api-discovery='true'" subsys=cilium-operator-generic level=info msg=" --enable-k8s-endpoint-slice='true'" subsys=cilium-operator-generic level=info msg=" --enable-k8s-event-handover='false'" subsys=cilium-operator-generic level=info msg=" --enable-k8s-networkpolicy='true'" subsys=cilium-operator-generic level=info msg=" --enable-k8s-terminating-endpoint='true'" subsys=cilium-operator-generic level=info msg=" --enable-l2-neigh-discovery='true'" subsys=cilium-operator-generic level=info msg=" --enable-l7-proxy='true'" subsys=cilium-operator-generic level=info msg=" --enable-local-redirect-policy='false'" subsys=cilium-operator-generic level=info msg=" --enable-metrics='false'" subsys=cilium-operator-generic level=info msg=" --enable-policy='default'" subsys=cilium-operator-generic level=info msg=" --enable-remote-node-identity='true'" subsys=cilium-operator-generic level=info msg=" --enable-sctp='false'" subsys=cilium-operator-generic level=info msg=" --enable-srv6='false'" subsys=cilium-operator-generic level=info msg=" --enable-svc-source-range-check='true'" subsys=cilium-operator-generic level=info msg=" --enable-vtep='false'" subsys=cilium-operator-generic level=info msg=" --enable-well-known-identities='false'" subsys=cilium-operator-generic level=info msg=" --enable-xt-socket-fallback='true'" subsys=cilium-operator-generic level=info msg=" --external-envoy-proxy='false'" subsys=cilium-operator-generic level=info msg=" --gops-port='9891'" subsys=cilium-operator-generic level=info msg=" --identity-allocation-mode='crd'" subsys=cilium-operator-generic level=info msg=" --identity-gc-interval='15m0s'" subsys=cilium-operator-generic level=info msg=" --identity-gc-rate-interval='1m0s'" subsys=cilium-operator-generic level=info msg=" --identity-gc-rate-limit='2500'" subsys=cilium-operator-generic level=info msg=" --identity-heartbeat-timeout='30m0s'" subsys=cilium-operator-generic level=info msg=" --ingress-lb-annotation-prefixes='service.beta.kubernetes.io,service.kubernetes.io,cloud.google.com'" subsys=cilium-operator-generic level=info msg=" --install-no-conntrack-iptables-rules='false'" subsys=cilium-operator-generic level=info msg=" --instance-tags-filter=''" subsys=cilium-operator-generic level=info msg=" --ipam='cluster-pool'" subsys=cilium-operator-generic level=info msg=" --ipam-cilium-node-update-rate='15s'" subsys=cilium-operator-generic level=info msg=" --k8s-api-server=''" subsys=cilium-operator-generic level=info msg=" --k8s-client-burst='10'" subsys=cilium-operator-generic level=info msg=" --k8s-client-qps='5'" subsys=cilium-operator-generic level=info msg=" --k8s-heartbeat-timeout='30s'" subsys=cilium-operator-generic level=info msg=" --k8s-kubeconfig-path=''" subsys=cilium-operator-generic level=info msg=" --k8s-namespace='kube-system'" subsys=cilium-operator-generic level=info msg=" --k8s-service-proxy-name=''" subsys=cilium-operator-generic level=info msg=" --kube-proxy-replacement='disabled'" subsys=cilium-operator-generic level=info msg=" --kvstore=''" subsys=cilium-operator-generic level=info msg=" --kvstore-lease-ttl='15m0s'" subsys=cilium-operator-generic level=info msg=" --kvstore-opt=''" subsys=cilium-operator-generic level=info msg=" --leader-election-lease-duration='15s'" subsys=cilium-operator-generic level=info msg=" --leader-election-renew-deadline='10s'" subsys=cilium-operator-generic level=info msg=" --leader-election-retry-period='2s'" subsys=cilium-operator-generic level=info msg=" --limit-ipam-api-burst='20'" subsys=cilium-operator-generic level=info msg=" --limit-ipam-api-qps='4'" subsys=cilium-operator-generic level=info msg=" --log-driver=''" subsys=cilium-operator-generic level=info msg=" --log-opt=''" subsys=cilium-operator-generic level=info msg=" --mesh-auth-enabled='true'" subsys=cilium-operator-generic level=info msg=" --mesh-auth-gc-interval='5m0s'" subsys=cilium-operator-generic level=info msg=" --mesh-auth-mutual-enabled='false'" subsys=cilium-operator-generic level=info msg=" --mesh-auth-queue-size='1024'" subsys=cilium-operator-generic level=info msg=" --mesh-auth-rotated-identities-queue-size='1024'" subsys=cilium-operator-generic level=info msg=" --mesh-auth-spiffe-trust-domain='spiffe.cilium'" subsys=cilium-operator-generic level=info msg=" --mesh-auth-spire-agent-socket='/run/spire/sockets/agent/agent.sock'" subsys=cilium-operator-generic level=info msg=" --mesh-auth-spire-server-address='spire-server.spire.svc:8081'" subsys=cilium-operator-generic level=info msg=" --mesh-auth-spire-server-connection-timeout='10s'" subsys=cilium-operator-generic level=info msg=" --monitor-aggregation='medium'" subsys=cilium-operator-generic level=info msg=" --monitor-aggregation-flags='all'" subsys=cilium-operator-generic level=info msg=" --monitor-aggregation-interval='5s'" subsys=cilium-operator-generic level=info msg=" --node-port-bind-protection='true'" subsys=cilium-operator-generic level=info msg=" --nodes-gc-interval='5m0s'" subsys=cilium-operator-generic level=info msg=" --operator-api-serve-addr='127.0.0.1:9234'" subsys=cilium-operator-generic level=info msg=" --operator-pprof='false'" subsys=cilium-operator-generic level=info msg=" --operator-pprof-address='localhost'" subsys=cilium-operator-generic level=info msg=" --operator-pprof-port='6061'" subsys=cilium-operator-generic level=info msg=" --operator-prometheus-serve-addr=':9963'" subsys=cilium-operator-generic level=info msg=" --parallel-alloc-workers='50'" subsys=cilium-operator-generic level=info msg=" --pod-restart-selector='k8s-app=kube-dns'" subsys=cilium-operator-generic level=info msg=" --preallocate-bpf-maps='false'" subsys=cilium-operator-generic level=info msg=" --procfs='/host/proc'" subsys=cilium-operator-generic level=info msg=" --proxy-connect-timeout='2'" subsys=cilium-operator-generic level=info msg=" --proxy-max-connection-duration-seconds='0'" subsys=cilium-operator-generic level=info msg=" --proxy-max-requests-per-connection='0'" subsys=cilium-operator-generic level=info msg=" --proxy-prometheus-port='9964'" subsys=cilium-operator-generic level=info msg=" --remove-cilium-node-taints='true'" subsys=cilium-operator-generic level=info msg=" --routing-mode='tunnel'" subsys=cilium-operator-generic level=info msg=" --set-cilium-is-up-condition='true'" subsys=cilium-operator-generic level=info msg=" --set-cilium-node-taints='true'" subsys=cilium-operator-generic level=info msg=" --sidecar-istio-proxy-image='cilium/istio_proxy'" subsys=cilium-operator-generic level=info msg=" --skip-cnp-status-startup-clean='false'" subsys=cilium-operator-generic level=info msg=" --skip-crd-creation='false'" subsys=cilium-operator-generic level=info msg=" --subnet-ids-filter=''" subsys=cilium-operator-generic level=info msg=" --subnet-tags-filter=''" subsys=cilium-operator-generic level=info msg=" --synchronize-k8s-nodes='true'" subsys=cilium-operator-generic level=info msg=" --synchronize-k8s-services='true'" subsys=cilium-operator-generic level=info msg=" --tofqdns-dns-reject-response-code='refused'" subsys=cilium-operator-generic level=info msg=" --tofqdns-enable-dns-compression='true'" subsys=cilium-operator-generic level=info msg=" --tofqdns-endpoint-max-ip-per-hostname='50'" subsys=cilium-operator-generic level=info msg=" --tofqdns-idle-connection-grace-period='0s'" subsys=cilium-operator-generic level=info msg=" --tofqdns-max-deferred-connection-deletes='10000'" subsys=cilium-operator-generic level=info msg=" --tofqdns-proxy-response-max-delay='100ms'" subsys=cilium-operator-generic level=info msg=" --tunnel-port='6082'" subsys=cilium-operator-generic level=info msg=" --tunnel-protocol='geneve'" subsys=cilium-operator-generic level=info msg=" --unmanaged-pod-watcher-interval='15'" subsys=cilium-operator-generic level=info msg=" --version='false'" subsys=cilium-operator-generic level=info msg=" --vtep-cidr=''" subsys=cilium-operator-generic level=info msg=" --vtep-endpoint=''" subsys=cilium-operator-generic level=info msg=" --vtep-mac=''" subsys=cilium-operator-generic level=info msg=" --vtep-mask=''" subsys=cilium-operator-generic level=info msg=" --write-cni-conf-when-ready='/host/etc/cni/net.d/05-cilium.conflist'" subsys=cilium-operator-generic level=info msg="Cilium Operator 1.14.8 cf6e022e 2024-03-13T12:23:35-04:00 go version go1.21.8 linux/amd64" subsys=cilium-operator-generic level=info msg=Invoked duration="888.573µs" function="pprof.glob..func1 (cell.go:50)" subsys=hive level=info msg=Invoked duration="167.584µs" function="gops.registerGopsHooks (cell.go:38)" subsys=hive level=info msg=Invoked duration=1.129407ms function="cmd.registerOperatorHooks (root.go:155)" subsys=hive level=info msg=Invoked duration=18.053029ms function="api.glob..func1 (cell.go:32)" subsys=hive level=info msg=Invoked duration="140.715µs" function="apis.createCRDs (cell.go:62)" subsys=hive level=info msg=Invoked duration="172.824µs" function="lbipam.glob..func1 (cell.go:25)" subsys=hive level=info msg=Invoked duration="276.536µs" function="auth.registerIdentityWatcher (watcher.go:42)" subsys=hive level=info msg=Invoked duration="135.803µs" function="cmd.registerLegacyOnLeader (root.go:361)" subsys=hive level=info msg=Invoked duration="153.713µs" function="identitygc.registerGC (gc.go:81)" subsys=hive level=info msg=Starting subsys=hive level=info msg="Started gops server" address="127.0.0.1:9891" subsys=gops level=info msg="Start hook executed" duration="457.471µs" function="gops.registerGopsHooks.func1 (cell.go:43)" subsys=hive level=info msg="Establishing connection to apiserver" host="https://10.96.0.1:443" subsys=k8s-client level=info msg="Connected to apiserver" subsys=k8s-client level=info msg="Start hook executed" duration=12.776178ms function="client.(*compositeClientset).onStart" subsys=hive level=info msg="Start hook executed" duration="15.131µs" function="cmd.registerOperatorHooks.func1 (root.go:158)" subsys=hive level=info msg="Waiting for leader election" subsys=cilium-operator-generic level=info msg="attempting to acquire leader lease kube-system/cilium-operator-resource-lock..." subsys=klog level=info msg="Start hook executed" duration=19.216787ms function="*api.server.Start" subsys=hive level=info msg="successfully acquired lease kube-system/cilium-operator-resource-lock" subsys=klog level=info msg="Leading the operator HA deployment" subsys=cilium-operator-generic level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumexternalworkloads.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumidentities.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumcidrgroups.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumnodeconfigs.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliuml2announcementpolicies.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumloadbalancerippools.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumpodippools.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumendpoints.cilium.io subsys=k8s level=info msg="Waited for 1.188433925s due to client-side throttling, not priority and fairness, request: GET:https://10.96.0.1:443/apis/apiextensions.k8s.io/v1/customresourcedefinitions/ciliumnodes.cilium.io" subsys=klog level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumnodes.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumnetworkpolicies.cilium.io subsys=k8s level=info msg="Creating CRD (CustomResourceDefinition)..." name=ciliumclusterwidenetworkpolicies.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumexternalworkloads.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumidentities.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumnodeconfigs.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliuml2announcementpolicies.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumloadbalancerippools.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumpodippools.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumcidrgroups.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumendpoints.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumnodes.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumnetworkpolicies.cilium.io subsys=k8s level=info msg="CRD (CustomResourceDefinition) is installed and up-to-date" name=ciliumclusterwidenetworkpolicies.cilium.io subsys=k8s level=info msg="Start hook executed" duration=4.858673653s function="apis.createCRDs.func1 (cell.go:64)" subsys=hive level=info msg="Start hook executed" duration="14.711µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumLoadBalancerIPPool].Start" subsys=hive level=info msg="Start hook executed" duration="2.6µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Start" subsys=hive level=info msg="Start hook executed" duration="21.48µs" function="*job.group.Start" subsys=hive level=info msg="Start hook executed" duration="1.7µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumIdentity].Start" subsys=hive level=info msg="Start hook executed" duration="2.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Start" subsys=hive level=info msg="Start hook executed" duration="1.89µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumPodIPPool].Start" subsys=hive level=info msg="Start hook executed" duration="2.3µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/networking/v1.IngressClass].Start" subsys=hive level=info msg="Initializing IPAM" mode=cluster-pool subsys=cilium-operator-generic level=info msg="Starting ClusterPool IP allocator" ipv4CIDRs="[10.0.0.0/8]" ipv6CIDRs="[]" subsys=ipam-allocator-clusterpool level=info msg="Managing Cilium Node Taints or Setting Cilium Is Up Condition for Kubernetes Nodes" k8sNamespace=kube-system label-selector="k8s-app=cilium" remove-cilium-node-taints=true set-cilium-is-up-condition=true set-cilium-node-taints=true subsys=cilium-operator-generic level=info msg="LB-IPAM initializing" subsys=lbipam level=info msg="Starting to synchronize CiliumNode custom resources" subsys=cilium-operator-generic level=info msg="Starting to garbage collect stale CiliumNode custom resources" subsys=watchers level=info msg="Cilium pod scheduled but not running for node; setting taint" nodeName=instance subsys=watchers level=info msg="Garbage collected status/nodes in Cilium Network Policies found=0, gc=0" subsys=cilium-operator-generic level=info msg="Garbage collected status/nodes in Cilium Clusterwide Network Policies found=0, gc=0" subsys=cilium-operator-generic level=info msg="CiliumNodes caches synced with Kubernetes" subsys=cilium-operator-generic level=info msg="Starting to garbage collect stale CiliumEndpoint custom resources" subsys=cilium-operator-generic level=info msg="Starting CNP derivative handler" subsys=cilium-operator-generic level=info msg="Starting CCNP derivative handler" subsys=cilium-operator-generic level=info msg="Initialization complete" subsys=cilium-operator-generic level=info msg="Start hook executed" duration=302.496655ms function="cmd.(*legacyOnLeader).onStart" subsys=hive level=info msg="Starting CRD identity garbage collector" interval=15m0s subsys=k8s-identities-gc level=info msg="Start hook executed" duration="152.084µs" function="identitygc.registerGC.func1 (gc.go:110)" subsys=hive level=info msg="Cilium pod running for node; marking accordingly" nodeName=instance subsys=watchers level=info msg="Cilium pod running for node; marking accordingly" nodeName=instance subsys=watchers level=info msg="Marking identity for later deletion" identity=10170 k8sUID=9944eaf2-a3ac-4398-ba0e-ff6900545b88 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=7688 k8sUID=9c02b6d7-a37d-4265-b762-04bcd8433019 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=15729 k8sUID=dbd37d73-302c-4ea8-97bb-d85468baf018 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=43244 k8sUID=7333731b-a349-4f4e-b1dd-a317f653fa1f subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=20973 k8sUID=c26e6ee3-bdc7-474d-bcfb-16f9880f9bff subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=28385 k8sUID=8175ee72-0953-4bc7-9a18-fb68de2defa1 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=35442 k8sUID=ec7b1c71-a661-48c3-a94f-f03122ba1873 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=32319 k8sUID=d6e18911-b3c2-42a7-a8a8-e5c9fa2b212b subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=54337 k8sUID=8409a3da-8ab7-4f79-ac5d-ba3696086cee subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=7784 k8sUID=00958b4b-1bab-4650-9f51-6f0d2ffad233 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=24143 k8sUID=0ffd5ab9-42c7-4e28-a637-57f35162f382 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=5326 k8sUID=96449439-2359-4605-aa43-f256d36d7ad4 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=18332 k8sUID=3ac3a3e2-69b6-4613-b634-f193150e12f1 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=17848 k8sUID=3ded14a7-8275-4daf-be82-8029851bb418 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=44631 k8sUID=e6c62508-0c2b-4571-9827-4cd872e8abae subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=18124 k8sUID=a9603642-3307-41e7-bc6d-5500881bb1f6 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=63036 k8sUID=3d9bf85a-d565-4e31-aca8-3234538e2030 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=2230 k8sUID=1056ae0e-232e-4007-bc50-f5810855319c subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=19619 k8sUID=90e63640-7726-4d00-9bfc-275e1e72da19 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=31864 k8sUID=1d3d4203-7a7d-4db0-ad01-c7e3009279f8 subsys=identity-heartbeat error retrieving resource lock kube-system/cilium-operator-resource-lock: the server was unable to return a response in the time allotted, but may still be processing the request (get leases.coordination.k8s.io cilium-operator-resource-lock) level=error msg="error retrieving resource lock kube-system/cilium-operator-resource-lock: the server was unable to return a response in the time allotted, but may still be processing the request (get leases.coordination.k8s.io cilium-operator-resource-lock)" subsys=klog level=warning msg="Network status error received, restarting client connections" error="an error on the server (\"[+]ping ok\\n[+]log ok\\n[-]etcd failed: reason withheld\\n[+]poststarthook/start-kube-apiserver-admission-initializer ok\\n[+]poststarthook/generic-apiserver-start-informers ok\\n[+]poststarthook/priority-and-fairness-config-consumer ok\\n[+]poststarthook/priority-and-fairness-filter ok\\n[+]poststarthook/storage-object-count-tracker-hook ok\\n[+]poststarthook/start-apiextensions-informers ok\\n[+]poststarthook/start-apiextensions-controllers ok\\n[+]poststarthook/crd-informer-synced ok\\n[+]poststarthook/start-service-ip-repair-controllers ok\\n[+]poststarthook/rbac/bootstrap-roles ok\\n[+]poststarthook/scheduling/bootstrap-system-priority-classes ok\\n[+]poststarthook/priority-and-fairness-config-producer ok\\n[+]poststarthook/start-system-namespaces-controller ok\\n[+]poststarthook/bootstrap-controller ok\\n[+]poststarthook/start-cluster-authentication-info-controller ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-controller ok\\n[+]poststarthook/start-deprecated-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-kube-apiserver-identity-lease-garbage-collector ok\\n[+]poststarthook/start-legacy-token-tracking-controller ok\\n[+]poststarthook/aggregator-reload-proxy-client-cert ok\\n[+]poststarthook/start-kube-aggregator-informers ok\\n[+]poststarthook/apiservice-registration-controller ok\\n[+]poststarthook/apiservice-status-available-controller ok\\n[+]poststarthook/kube-apiserver-autoregistration ok\\n[+]autoregister-completion ok\\n[+]poststarthook/apiservice-openapi-controller ok\\n[+]poststarthook/apiservice-openapiv3-controller ok\\n[+]poststarthook/apiservice-discovery-controller ok\\nhealthz check failed\") has prevented the request from succeeding (get healthz.meta.k8s.io)" subsys=k8s-client error retrieving resource lock kube-system/cilium-operator-resource-lock: the server was unable to return a response in the time allotted, but may still be processing the request (get leases.coordination.k8s.io cilium-operator-resource-lock) level=error msg="error retrieving resource lock kube-system/cilium-operator-resource-lock: the server was unable to return a response in the time allotted, but may still be processing the request (get leases.coordination.k8s.io cilium-operator-resource-lock)" subsys=klog level=info msg="Marking identity for later deletion" identity=29925 k8sUID=1bf65e22-1bda-4766-83e0-4915066bea3d subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=27480 k8sUID=b781a3b4-6c18-47c9-babc-65d260e83ba2 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=17696 k8sUID=0fd70f15-bcbb-4ccc-97b4-f500897b7a84 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=14786 k8sUID=4093a23c-e982-4bbd-b692-388ac5dd3379 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=43603 k8sUID=98a20f56-04c1-4f6f-b178-856b91cacc48 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=24338 k8sUID=9e0018ca-7a06-4a67-b33d-44bc7c580e10 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=34640 k8sUID=74b1a703-87cb-4f58-b64b-bdd4f44f3e50 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=45584 k8sUID=20e658eb-5ca7-4d13-b9b7-42fdc7caa734 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=18215 k8sUID=2ffd0aa8-f7f9-451a-8893-a0d4899a7d90 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=21695 k8sUID=c399d299-eb43-4b66-8706-3710b46d846f subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=25242 k8sUID=c37224fb-12b7-4453-a3b8-613bc6318cd8 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=6455 k8sUID=51be20c6-7e0d-453f-aec1-81d7cba60f8c subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=24629 k8sUID=fa6e9301-2797-49ed-8f42-2e27797c2d89 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=38365 k8sUID=46416288-fc4c-4090-b1ce-d9eb1b4cec75 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=56346 k8sUID=f72e6f1e-4f52-4d84-98ca-39e37154d7ab subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=7184 k8sUID=dae3fcd8-d5d9-4efd-ba09-744191da3241 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=5659 k8sUID=f5eef062-e6df-473a-9590-ba37285a43a8 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=59449 k8sUID=d5791347-bb4d-4088-9504-3225a4cddb89 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=4920 k8sUID=7b03263b-a26b-4587-a402-fea7d07d0273 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=10308 k8sUID=1075f3dc-a055-4824-bd7a-09acd49a7548 subsys=identity-heartbeat level=info msg="Marking identity for later deletion" identity=16073 k8sUID=2b8bc514-cec6-43a3-b567-ef21542ca64c subsys=identity-heartbeat error retrieving resource lock kube-system/cilium-operator-resource-lock: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock?timeout=5s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) level=error msg="error retrieving resource lock kube-system/cilium-operator-resource-lock: Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" subsys=klog level=error msg="Marking identity for later deletion" error="etcdserver: request timed out" identity="&{{ } {16073 2b8bc514-cec6-43a3-b567-ef21542ca64c 12263 1 2026-05-17 01:31:12 +0000 UTC map[application:cinder batch.kubernetes.io/controller-uid:64a2c153-98f3-4472-aa88-1973f6ea1d44 batch.kubernetes.io/job-name:cinder-storage-init component:storage-init controller-uid:64a2c153-98f3-4472-aa88-1973f6ea1d44 io.cilium.k8s.policy.cluster:default io.cilium.k8s.policy.serviceaccount:cinder-storage-init io.kubernetes.pod.namespace:openstack job-name:cinder-storage-init release_group:cinder] map[io.cilium.heartbeat:2026-05-17T02:08:16.71667054Z] [] [] [{cilium-agent Update cilium.io/v2 2026-05-17 01:31:12 +0000 UTC FieldsV1 {\"f:metadata\":{\"f:labels\":{\".\":{},\"f:application\":{},\"f:batch.kubernetes.io/controller-uid\":{},\"f:batch.kubernetes.io/job-name\":{},\"f:component\":{},\"f:controller-uid\":{},\"f:io.cilium.k8s.policy.cluster\":{},\"f:io.cilium.k8s.policy.serviceaccount\":{},\"f:io.kubernetes.pod.namespace\":{},\"f:job-name\":{},\"f:release_group\":{}}},\"f:security-labels\":{\".\":{},\"f:k8s:application\":{},\"f:k8s:batch.kubernetes.io/controller-uid\":{},\"f:k8s:batch.kubernetes.io/job-name\":{},\"f:k8s:component\":{},\"f:k8s:controller-uid\":{},\"f:k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name\":{},\"f:k8s:io.cilium.k8s.namespace.labels.name\":{},\"f:k8s:io.cilium.k8s.policy.cluster\":{},\"f:k8s:io.cilium.k8s.policy.serviceaccount\":{},\"f:k8s:io.kubernetes.pod.namespace\":{},\"f:k8s:job-name\":{},\"f:k8s:release_group\":{}}} }]} map[k8s:application:cinder k8s:batch.kubernetes.io/controller-uid:64a2c153-98f3-4472-aa88-1973f6ea1d44 k8s:batch.kubernetes.io/job-name:cinder-storage-init k8s:component:storage-init k8s:controller-uid:64a2c153-98f3-4472-aa88-1973f6ea1d44 k8s:io.cilium.k8s.namespace.labels.kubernetes.io/metadata.name:openstack k8s:io.cilium.k8s.namespace.labels.name:openstack k8s:io.cilium.k8s.policy.cluster:default k8s:io.cilium.k8s.policy.serviceaccount:cinder-storage-init k8s:io.kubernetes.pod.namespace:openstack k8s:job-name:cinder-storage-init k8s:release_group:cinder]}" subsys=identity-heartbeat error retrieving resource lock kube-system/cilium-operator-resource-lock: Get "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock?timeout=5s": context deadline exceeded level=error msg="error retrieving resource lock kube-system/cilium-operator-resource-lock: Get \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock?timeout=5s\": context deadline exceeded" subsys=klog level=info msg="failed to renew lease kube-system/cilium-operator-resource-lock: timed out waiting for the condition" subsys=klog Failed to release lock: Put "https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock?timeout=5s": net/http: request canceled (Client.Timeout exceeded while awaiting headers) level=error msg="Failed to release lock: Put \"https://10.96.0.1:443/apis/coordination.k8s.io/v1/namespaces/kube-system/leases/cilium-operator-resource-lock?timeout=5s\": net/http: request canceled (Client.Timeout exceeded while awaiting headers)" subsys=klog level=info msg="Leader election lost" operator-id=instance-vJukwHQZpi subsys=cilium-operator-generic level=info msg=Stopping subsys=hive level=info msg="Stop hook executed" duration="63.322µs" function="*api.server.Stop" subsys=hive level=info msg="Stop hook executed" duration="70.082µs" function="identitygc.registerGC.func2 (gc.go:122)" subsys=hive level=info msg="Stop hook executed" duration="578.704µs" function="cmd.(*legacyOnLeader).onStop" subsys=hive level=info msg="Stop hook executed" duration="6.73µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/networking/v1.IngressClass].Stop" subsys=hive level=info msg="Stop hook executed" duration="4.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumPodIPPool].Stop" subsys=hive level=info msg="Stop hook executed" duration="3.98µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s.Endpoints].Stop" subsys=hive level=info msg="Stop hook executed" duration="76.552µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2.CiliumIdentity].Stop" subsys=hive level=info msg="LB-IPAM done initializing" subsys=lbipam level=info msg="Stop hook executed" duration="87.322µs" function="*job.group.Stop" subsys=hive level=info msg="Stop hook executed" duration="13.11µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/slim/k8s/api/core/v1.Service].Stop" subsys=hive level=info msg="Stop hook executed" duration="90.772µs" function="*resource.resource[*github.com/cilium/cilium/pkg/k8s/apis/cilium.io/v2alpha1.CiliumLoadBalancerIPPool].Stop" subsys=hive level=info msg="Stop hook executed" duration=1.520016ms function="cmd.registerOperatorHooks.func2 (root.go:166)" subsys=hive level=info msg="Stop hook executed" duration="17.61µs" function="client.(*compositeClientset).onStop" subsys=hive level=info msg="Stopped gops server" address="127.0.0.1:9891" subsys=gops level=info msg="Stop hook executed" duration=12.525735491s function="gops.registerGopsHooks.func2 (cell.go:50)" subsys=hive level=fatal msg="Leader election lost" subsys=cilium-operator-generic